...

• https://chemlabs.csotest.arts.cornell.edu/grades/

To do's

See the following section for context related to these to-do's.

Enable Pat's "push" capabilities so her DB info can be seen on the web

• Tu will work with Roger.
  • Tu needs IP addresses. Roger can do the installs.
  • And Roger may have better alternatives. :-)

Test PatH's restore procedure.

• Do end of Sept?

Enable PatH's remote access

• ChemIT must do this.
• Oliver must do or assign.

Enable ChemIT staff's access to CCB FMPro DBs.

• Do via AD group. Enable only "Admin" accounts, not ChemIT staff's user accounts. (Right, Roger?)
• Tu to work with Roger.

Decisions, processes, and procedures

...

• Requires ODBC connection. Not possible at FMPro server; must be set up at FMPro client's computer.
  • Do for PatH's computer. As backup, do on Sam's computer.
  • Current plan: For each computer, set ODBC up as system's Admin (vs. user) so ODBC accessible/ configured for any computer account.Tu will work with Roger. Tu needs IP addresses. Roger can do the installs. And he may have better alternatives. :-)

Establish semester-start procedures and processes. Includes:

...

PatH can do any restore herself using FMPro, ensuring "low friction" access to the backup files (nobody to contact, not hoops to jump through).

• Zero out course data on the A&S FMPro server.
• Importing data from the correct course backup file.
  • Latest version would be from ~half a work day before.
• If PatH needs backup data older than what she has access to herself (> 7 days, so rare), she must contact Dani or Tu for them to get via back-ups of the SQL server data (or from EZ-Backup).
  • Note that A&S's EZ-Backup would itself only have the 3 prior versions. If course DB was changed each day, that's just three backups. If course DB rarely changed, then that can be a long time.

Ensure Pat's "low friction" access to the backup files.

• Do in a way to minimize need for mediation by others. Pat may need access during a weekend or after-hours, for example.
• Confirm Pat's access
  • .

Enable Pat's view of DB data from home.

The need for this has been reduced since many folks can self-serve, and PatH herself has view-only web access.

• Although the web version may be
• View only (where web access or clone (backup) would suffice), or are modifications required?
• Web version OK for view-only of some data, but it's obviously not as flexible for searching.Idea 1. And there is no way for PatH to make changes through the web version.
• On accasions when PatH needs full access, we will enable Remote Desktop on PatH's main work computer. This way she can do everything she can do when she's at work.
  • She access her computer from off-campus via VPN.

As an alternative, if she knows she'll need it ahead of time, PatH can take a backup copy of any course on a FMPro computer for stand-alone access. This works as long as PatH doesn't make changes on the stand-alone DB that she later expects to see on the production, server-based DB, of course!

Rejected idea, for future reference: With FMPro installed on dept. laptop, access AS's FMPro server off-campus

...

and do the work that way.

...

Ensure security of FERPA data in Grades DB.

...

• FERPA-like data so ChemIT would appreciate understanding the ACL (see for subnet?) and firewall configurations.
  • ChemIT thinks there shouldn't be any off-campus access except via VPN. Thus take off of public net and put into 10-space. But there may be other factors to consider.
• Who Access to the FMPro DB is controlled by NetID (AD groups). Once in, who else has access to Grades DB FMPro DB itself?
  • Answer: Just those authorized.
• Ideal: Make all access via NetID/ NetID p/w, not via FMPro DB's own controls.
  • Control NetID membership via Active Directory groups.
    • Start with Grad TA access, via theTA room kiosks? Also start with faculty access?
    • Once process confirmed, establish procedure for enabling and disabling NetID access to Grades FMPro DB by grads and faculty
      • Can take ChemIT staff less than a minute to do this, and is effective immediately.

...